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Description 

[0001] The present invention relates to a processing 
apparatus comprising an internal circuit having a CPU 
and internal devices, and an external circuit including 
external devices provided externally of the internal cir- 
cuit, and to an integrated circuit incorporating such 
processing apparatus. 

[0002] With the recent development of LSI, a CPU ex- 
ecuting programs, a memory storing the programs exe- 
cuted by the CPU and various other devices have been 
able to be integrated on one chip, which contributes 
greatly to making an apparatus small in size, achieving 
cost reduction and the like. To manufacture such LSI, it 
suffices to mount a memory storing programs on a LSI 
chip if a system executes the same programs irrespec- 
tively of users and does not need to change programs 
after completion. However, if it is necessary to execute 
different programs according to users or to change a 
program while the program is in use, it is desirable to 
constitute LSI so that an external memory can be further 
provided externally of the LSI having the above consti- 
tution and to store programs which may be possibly 
changed while in use or programs which differ according 
to users in the external memory. 
[0003] Meanwhile, in case of a system capable of 
adding such an external memory externally of the LSI, 
however, there is a probability that the content of the 
external memory is illicitly rewritten orthe external mem- 
ory is replaced by a memory storing an illicit program 
and having the same specification as that of the external 
memory, with the result that important programs or data 
stored in the internal memory are illicitly accessed and 
the contents of the programs or data are illicitly inter- 
preted. The following is one example of this case. 
[0004] Recently, IC cards and magnetic cards each 
having a cash value or a point value corresponding to a 
cash as data is spreading increasingly. Following this, it 
is of urgent necessity to ensure data security so as to 
prevent the fabrication or falsification of cards. To this 
end, methods of preventing the reverse engineering of 
an apparatus were attempted in the past. Despite these 
attempts, it is the present situation that illicit ROMs and 
the like are created and apparatuses are incessantly 
abused against developers' will. 
[0005] Accordingly, it is desirable to provide a 
processing apparatus and an integrated circuit intended 
to prevent illicit access and reverse engineering. 
[0006] In this regard, EP-A-0720098 and US-A- 
5081 675 disclose a processing apparatus comprising: 
an internal circuit including a CPU executing programs, 
at least one internal device having a predetermined 
function and bus line means connecting said CPU to 
said internal device, extending externally and transfer- 
ring an address and data; and an external circuit provid- 
ed externally of an externally extending portion of said 
bus line means and including at least one external de- 
vice having a predetermined function, wherein said in- 



ternal circuit includes a ciphering section interposed at 
an entrance to an external side and ciphering the ad- 
dress and the data on the bus line means by ciphering 
patterns according to a plurality of regions divided from 
5 an address space allotted to the entirety of said at least 
one external device. 

[0007] US-A-551 5540 and EP-A-1 093056 are also of 
relevance to the problems addressed by the present in- 
vention. 

10 [0008] According to a first aspect of the present inven- 
tion there is provided a processing apparatus compris- 
ing: 

an internal circuit including a CPU executing pro- 
15 grams, at least one internal device having a prede- 
termined function and bus line means connecting 
said CPU to said internal device, extending exter- 
nally and transferring an address and data; and an 
external circuit provided externally of an externally 
20 extending portion of said bus line means and includ- 
ing at least one external device having a predeter- 
mined function, wherein said internal circuit in- 
cludes a ciphering section interposed at an en- 
trance to an external side and ciphering the address 
25 and the data on the bus line means by ciphering 
patterns according to a plurality of regions divided 
from an address space allotted to the entirety of said 
at least one external device; 

30 characterised in that said ciphering section outputs a 
dummy address and dummy data to the externally ex- 
tending portion of said bus line means at timing at which 
said external circuit is not accessed. 
[0009] Since the ciphering section outputs a dummy 
35 address and dummy data to the externally extending 
portion of the bus line at timing at which the external 
circuit is not accessed, illicit interpretation is made more 
difficult. 

[001 0] Here, the ciphering patterns adopted by the ci- 
40 phering section include one ciphering pattern in which 
neither the address nor data is ciphered. 
[001 1 ] As stated above, by dividing the address space 
into a plurality of areas and ciphering the address and 
the data by the patterns which differ according to the 
45 divided areas, it is made difficult to interpret ciphers. 
[0012] In the first processing apparatus embodying 
the present invention stated above, it is preferable that 
the external circuit includes a plurality of external devic- 
es; and 

50 the ciphering section performs ciphering using ci- 

phering patterns according to the plurality of external de- 
vices, respectively. 

[001 3] By doing so, it is possible to perform ciphering 
according to the property of the external device as fol- 
55 lows. If a flash ROM Is provided as one of the external 
devices, for example, both the address and the data are 
ciphered for the flash ROM. As for a RAM, as one of the 
external devices, which can read continuous addresses 
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at high speed, only the data is ciphered orthe addresses 
are ciphered but the lower bit side of the addresses con- 
tinuously read are not ciphered. If an I/O device is pro- 
vided as one of the external devices, neither the address 
nor data is ciphered. 

[0014] Furthermore, in the processing apparatus em- 
bodying the present invention stated above, it is prefer- 
able that the CPU is supplied with a clock and executes 
the programs synchronously with the supplied clock, 
and the ciphering section is supplied with a clock and 
performs ciphering synchronously with the supplied 
clock; and a clock supply section for supplying a clock 
at a higher speed than a speed of the clock supplied to 
the CPU, to the ciphering section. 
[0015] This makes complicated ciphering possible. 
[001 6] Moreover, in the processing apparatus embod- 
ying the present invention, it is preferable that the 
processing apparatus comprises ciphering pattern de- 
termination means for recognizing a constitution of the 
external circuit and determining a ciphering pattern of 
the ciphering section according to the constitution of the 
external circuit. 

[0017] By providing this ciphering pattern determina- 
tion means, it becomes unnecessary to carry out oper- 
ations such as the operator's determination of ciphering 
patterns according to different constitutions of the exter- 
nal circuit. 

[0018] Further, in the processing apparatus embody- 
ing the present invention stated above, it is preferable 
that the ciphering section ciphers the address and the 
data on the bus line by ciphering patterns according to 
the plurality of regions divided from the address space 
allotted to the entirety of the no less than one external 
device and according to application programs executed 
by the CPU. 

[0019] This makes ciphering patterns more compli- 
cated and illicit interpretation more difficult. 
[0020] Furthermore, in the processing apparatus em- 
bodying the present invention stated above, it is prefer- 
able that a deciphering section connected to the exter- 
nally extending portion of the bus line, and returning the 
ciphered address and the data on the bus line to an ad- 
dress and data which are not ciphered. 
[0021 ] If debugging is to be performed without provid- 
ing this deciphenng section, the debugging becomes 
extremely difficult since the address and data are ci- 
phered. Considering this, this deciphering section is pro- 
vided, thereby making it possible to easily carry out de- 
bugging at the time of developing the processing appa- 
ratus. 

[0022] This deciphering section becomes unneces- 
sary after the completion of debugging. Therefore, it is 
preferable that the deciphering section is detached from 
the processing apparatus, fixed to a disabled state or 
destroyed. 

[0023] Additionally, in the processing apparatus em- 
bodying the present invention stated above, it is prefer- 
able that the processing apparatus comprises ciphering 



pattern change means for changing a ciphering pattern 
whenever a predetermined initialization operation is car- 
ried out for one of the plurality of regions divided from 
the address space allotted to the entirety of the at least 
5 one external device. 

[0024] By resetting the ciphering pattern in a prede- 
termined initialization operation, e.g. , when the process- 
ing apparatus is powered on or reset and the like, illicit 
interpretation is made more difficult and security thereby 
enhances. 

[0025] Also, in the processing apparatus embodying 
the present invention stated above, it is preferable that 
the ciphering section adopts a ciphering pattern in which 
ciphered data is changed according to the address, for 
one of the plurality of regions divided from the address 
space allotted to the entirety of the at least one external 
device, to thereby cipher the data. 
[0026] By adopting the function of addresses as a ci- 
phering function to cipher the data, complicated cipher- 
ing is made possible, illicit interpretation is made more 
difficult and data security thereby enhances. 
[0027] According to a second aspect of the present 
invention, there is provided an integrated circuit includ- 
ing a processing apparatus in accordance with the first 
aspect of the present invention. 

[0028] An integrated circuit embodying the present in- 
vention has the above constitution and exhibits the 
same function and advantage as those of the process- 
ing apparatus embodying the present invention. In ad- 
dition, the integrated circuit makes it difficult to interpret 
the circuit arrangement and the like. In this respect, too, 
the integrated circuit contributes to enhancing security. 
[0029] Reference will now be made, by way of exam- 
ple, to the accompanying drawings, in which: 

Fig. 1 is a block diagram of the first embodiment of 
a processing apparatus according to the present in- 
vention; 

Fig. 2 shows a memory map of the processing ap- 
paratus shown in Fig. 1 ; and 
Fig. 3 is a flow chart of an initialization program ex- 
ecuted when the processing apparatus shown in 
Fig. 1 is powered on. 

[0030] The embodiments of the present invention will 
be described hereinafter. 

[0031] Fig. 1 is a block diagram showing an embodi- 
ment of a processing apparatus according to the present 
invention. 

[0032] A processing apparatus 1 shown in Fig. 1 con- 
sists of a internal circuit 100 mounted inside of an LSI 
10, an external circuit 200 provided externally of the LSI 
1 0 and the others including oscillators 301 and 302 and 
the like. This LS1 1 0 corresponds to one embodiment of 
an integrated circuit of the present invention. 
[0033] The internal circuit 1 00 provided within the LSI 
10 has a central processing unit (CPU) 101 as well as 
an internal memory 1 02, a ciphering information register 
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103, an address decoder 104 and a peripheral circuit 
1 05 which are internal devices according to the present 
invention. The CPU 101 and the various internal devices 
are mutually connected through a bus line 110. This bus 
line consists of an address bus 111 and a data bus 112 
and extends externally of the LSI 10. Various external 
devices are connected to a portion 1 1 0a of the bus line 
110 which extends externally. The external devices will 
be described later. 

[0034] The internal circuit 100 constituted within the 
LSI 10 is provided with a ciphering section 120 inter- 
posed at an entrance to an external side. This ciphering 

section 120 consists of a ciphering circuit 121, a bus 
interface 122 and a random number generation circuit 
123. 

[0035] A clock signal from the oscillator 301 is input- 
ted into the CPU 101 . The CPU 101 executes various 
programs synchronously with the clock signal received 
from the oscillator 301 . 

[0036] A clock signal from another oscillator 302 
which generates a clock signal higher in repetition fre- 
quency than the clock signal inputted into the CPU 1 01 , 
is inputted into the ciphering circuit 121 . The ciphering 
circuit 121 conducts a ciphering processing synchro- 
nously with the clock signal with a high repetition fre- 
quency from the oscillator 302. The detail of the cipher- 
ing processing will be described later. 
[0037] The above two oscillators 301 and 302 gener- 
ate clock signals synchronous with each other. There- 
fore, the oscillators 301 and 302 may generate clocksig- 
nals by dividing a high-speed clock obtained by a com- 
mon oscillation source. 

[0038] Further, a plurality of external devices, i.e., in 
case of Fig. 1 , a liquid crystal display (LCD) 201 , a key- 
board (KB) 202, a read-only memory (ROM) 203, a flash 
ROM 211 and a random-access memory (RAM) 212, 
are connected to the externally extending portion 11 Oa 
of the bus line 1 1 0. In Fig. 1 , a device 21 3 , such as an- 
other LSI , which is the same in constitution as the LSI 
10 shown in Fig. 1 and which has the same ciphering 
mechanism as that of the internal circuit 1 00, and a de- 
ciphering circuit 214 for debugging programs operated 
by the CPU 1 01 are also connected to the externally ex- 
tending portion 1 1 0a. The device 21 3 and the decipher- 
ing circuit 214 are shown in Fig. 1 for description pur- 
poses. The device 213 is connected to the LSI 10 if ci- 
pher communication is established between the LSI 10 
and the device 213 having a similar constitution to that 
of the LSI 10. The deciphering circuit 214 is connected 
for program debugging and detached after the comple- 
tion of debugging. 

[0039] The LCD 201 and the KB 202 as well as, in 
case of the embodiment shown in Fig. 1 . the ROM 203 
belong to external devices which cipher neither ad- 
dresses nor data. The flash ROM 211 and the RAM, by 
contrast, belong to external devices which cipher and 
access addresses or data. Here, the flash ROM 211 ci- 
phers only data and the RAM ciphers both addresses 



and data. Further, the device 213 ciphers both address- 
es and data and establishes cipher communication with 
the LS1 1 0. When connected to the LS1 1 0, the decipher- 
ing circuit 214 belongs to the devices which cipher nei- 

5 ther addresses nor data in this embodiment. 

[0040] Here, the bus line 1 1 0 is divided into a portion 
connected to the CPU 101 (the address and data of 
which portion are denoted by A1 and 01 . respectively), 
a portion put between the ciphering circuit 121 and the 

10 bus interface 122 (the address and data of which portion 
are denoted by A2 and D2, respectively) and the exter- 
nally extending portion 110a of the LSI 10 (the address 
and data of which portion are denoted by A3 and D3, 
respectively). 

15 [0041] Fig. 2 shows the memory map of the process- 
ing apparatus shown in Fig. 1 . 

[0042] A plurality of application programs are stored 
in the flash ROM which is one of the external devices. 
OS programs are stored in the internal memory which 

20 is one of the internal devices. Also, apparatus constitu- 
tion infomnation on this processing apparatus, e.g., 
types of external devices connected and memory ca- 
pacities are recorded on the ROM which is one of the 
external devices. 

25 [0043] Fig. 3 is a flow chart of an initialization program 
executed when the processing apparatus shown in Fig. 
1 is powered on. This initialization program is stored in 
the internal memory 1 02 as one of the OS programs and 
executed by the CPU 101 when power is turned on. 

30 [0044] According to the initialization program shown 
in Fig. 3, first, the apparatus constitution information 
stored in the ROM 203 which is one of the external de- 
vices is read (in a step al), a memory map as shown in 
Fig. 2 is created based on the information and a cipher- 

35 ing pattern is determined for each area of the memory 
map (in a step a2). It is noted that ciphering patterns 
include a pattern in which neither addresses nor data 
are ciphered. 

[0045] In this initialization program, various other ini- 
40 tialization processings follow (in a step a3). 

[0046] Description will be continued, with reference 
back to Fig. 1 . 

[0047] The CPU 1 01 reads and writes information us- 
ing the address Al and the data D1 . The external de- 
45 vices are accessed using the address A3 and the data 
D3 irrespectively of whether it is necessary to cipher the 
devices or not (or it is prohibit the devices from being 
ciphered). 

[0048] The CPU 1 01 writes area information on areas 
50 to be ciphered (ciphered areas) and a ciphering pattern 
for each ciphered area on the memory map shown in 
Fig. 2, in a ciphering information register 103. 
[0049] The address decoder 104 inputs the address 
A1 and receives the area information indicating to-be- 
55 ciphered areas from the ciphering information register 
1 03. Then, the address decoder 1 04 outputs chip select 
signals CSO to CS6 to an access target device and out- 
puts a ciphering control signal Crp, indicating which de- 
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vice is an access target and whether or not it is neces- 
sary to conduct ciphering, to the ciphering circuit 121 . 
[0050] The ciphering circuit 121 receives the cipher- 
ing control signal Crp from the address decoder, con- 
ducts ciphering according to the ciphered areas when it 
is necessary to cipher the address A1 and data D1 
based on the ciphering pattern infornnation recorded on 
the ciphering pattern information register 103, and out- 
puts the address A2 and data D2. The address A2 and 
data D2 are outputted externally of the LSI 10 as ad- 
dress A3 and data D3 by way of the bus interface 123. 
[0051] An external bus access signal indicating 
whether an external device is to be accessed is trans- 
mitted from the CPU 101 to the bus interface 122. The 
bus interface 122 outputs the address A2 and data D2 
outputted externally from the ciphering circuit 121 as the 
external address A3 and data D3 when access to the 
external device is requested, generates a dummy ad- 
dress and dummy data based on the random number 
from the random number generation circuit 1 23 and out- 
puts the dummy address and dummy data as the exter- 
nal address A3 and data D3 when access to the external 
device is not requested. This mal<es illicit interpretation 
more difficult. 

[0052] The conversion of addresses and data from in- 
ternally to externally has been described. As for the data 
D3 read from the external flash memory 211, RAM 212, 
ROM 203 and the like is fetched into the internal side as 
the data D2. If the data is ciphered data, the ciphering 
circuit 121 deciphers the ciphered data and transmits 
the data to the CPU 1 01 and the like as data D1 which 
is not ciphered. 

[0053] In this embodiment, as the ciphering pattern, 
a ciphering pattern in which neither addresses nor data 
are ciphered is adopted. In addition, the following ci- 
phering patterns are adopted: 

(1)Type1 

A3 = A1 XOR p1 



D3 = D1 XOR pi 

(2) Type 2 

A3 = A1 



D3 = A1 + D1 +p1 

(3) Type 3 

[0054] The higher level and lower level of the data as 
a result of the operation of type 2 are replaced. 
[0055] In above types, reference pi denotes an ap- 



propriate constant obtained by, for example, random 
numbers; 

[0056] A XOR B signifies performing an exclusive OR 
operation for bits corresponding to A and B, and A + B 
5 signifies an addition operation if A and B are assumed 
as numeric values. 

[0057] As already described above with reference to 
Fig. 3, in the initialization operation when power is 
turned on, the CPU 101 reads the apparatus constitution 

10 information stored in the ROM 203 which is one of the 
external devices, creates a memory map as shown in 
Fig. 2 and determines a ciphering pattern for each ci- 
phered area. The flash ROM 211 adopts the ciphering 
pattern of, for example, (2) above in which the address 

15 is not ciphered and only the data is ciphered, and the 
RAM 212 adopts the ciphering pattern of, for example, 
(1) above in which both the address and the data are 
ciphered. 

[0058] The RAM 212 adopts the ciphering pattern of 
20 type 1 in (1) above. Therefore, if it is assumed that p1 = 
0 X 5555 (0 x means that following '5555' is a hexadec- 
imal), both the address and the data become completely 
different values from the original address and data as 

A3 (0 X 5455) 
= A1 (Ox 01 00) XOR p1 (0 X 5555) 



D3 (0 X 5476) 
= D1 (Ox 0123) XOR p1 (0 x 5555). 

35 [0059] Further, the flash ROM 21 1 adopts the cipher- 
ing pattern of type 2 in (2) above. Therefore, if it is as- 
sumed that pi = 0X5555, the address has no change 
and the data becomes a completely different value from 
the original data as follows: 

40 

A3(0x0100) = A1 (0x0100) 



D3 (0 X 5778) 
= A1 (Ox0100) + D1 (Ox 0123) + pi (0x5555). 

Here, in ciphering the data, the data is a function of the 
address A1 . Due to this, even if the data is the same, i. 
e., D1 , the ciphered data D3 differs from the original data 
according to the address A1 , thereby further making il- 
licit interpretation difficult and further enhancing securi- 
ty- 

[0060] It is noted that the above description is a cal- 
culative example of a ciphering pattern. If an address is 

to be ciphered, a ciphering algorithm is taken into con- 
sideration so that a ciphered address does not over- 
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spread the address area of the ciphering target device 
and does not move to the address area of a device other 
than the ciphering target device. 
[0061] In addition, even with the same RAIVI 212, it is 
possible to change ciphering patterns for accessing the 
RAIVI 212 according to application programs executed 
by the CPU 101 . By not only selecting a ciphering pat- 
tern according to a memory area (a to-be-accessed ex- 
ternal device) but also changing ciphering patterns ac- 
cording to application programs even in the same mem- 
ory area (same external device), the address and data 
outputted to the externally extending portion 1 1 0a of the 
bus line 1 1 0 are ciphered in a more complicated manner, 
thereby making illicit interpretation further difficult and 
further enhancing security. 

[0062] Here, if it is assumed that the CPU 101 and the 
ciphering circuit 1 21 operate at the same clocks, the ci- 
phering circuit 121 cannot perform a complex ciphering 
operation. For example, if the CPU 101 accesses an ex- 
ternal device at one-clock intervals, the ciphering circuit 
121 is required to complete its ciphering processing 
within one clock. In case of the type 3 ciphering process- 
ing in (3) above, for example, it requires one-clock time 
to perform the type 2 ciphering in (2) and it further re- 
quires one-clock time to exchange the higher level and 
lower level bits. Namely, it requires a total of two-clock 
time and it is necessary for the ciphering circuit 121 to 
complete the ciphering processing within one clock, 
then the ciphering pattern type 3 in (3) cannot be adopt- 
ed. 

[0063] In case of the embodiment shown in Fig. 1 , the 
oscillator 302 which generates a higher-speed clock 
than that of the oscillator 301 which supplies a clock to 
the CPU 101, is provided and the ciphering circuit 1 21 
operates synchronously with the higher-speed clock 
supplied from the oscillator 302. Thus, for example, the 
ciphering pattern of type 3 in (3) above or a more com- 
plicated ciphering pattern which requires a plurality of 
clocks can be adopted. 

[0064] For example, if a clock with 1 0 MH^ is supplied 
to the CPU 101 and a clock with 1 00 MH^ is supplied to 
the ciphering circuit 121, the ciphering circuit can per- 
form a ciphering processing using 10 clocks. 
[0065] Moreover, the internal circuit 100 of the 
processing apparatus shown in Fig. 1 is incorporated 
into the LSI 10 and address and data ciphered through 
the ciphering circuit 121 and the bus interface 122 are 
outputted from the LSI 10. With the address and data 
as they are, it is quite difficult for the CPU 101 to execute 
program debugging when developing a product employ- 
ing this LSI 10. In view of this, a deciphering circuit 214 
is connected to the processing circuit shown in Fig. 1 . 
[0066] Before debugging, information on a ciphering 
pattern and a ciphered area having the same content as 
that written into the ciphered information register 1 03 
from the CPU 1 01 are written into this deciphering circuit 
214. In the following debugging, the deciphering circuit 
214 deciphers the ciphered address and data outputted 



to the externally extending portion 110a of the bus line 
110 based on the information on the ciphering pattern 
and the ciphered area written in advance, and deciphers 
the address to an address and data which are not ci- 

5 phered. By doing so, it is possible to monitor the address 
and data deciphered by the deciphering circuit 214 by 
using, for example, a measuring instrument and to eas- 
ily debug programs executed by the CPU 1 01 . 
[0067] If this deciphering circuit 214 is left unde- 

10 tached, the significance of ciphering the address and 
data with a view to making illicit interpretation difficult is 
lost. For that reason, the deciphering circuit 214 is con- 
stituted as a device different from the processing appa- 
ratus and detached therefrom afterthe completion of de- 

15 bugging. Alternatively, the deciphering circuit 214 may 
remain attached thereto to be completely disabled. 
[0068] Further, as shown in Fig. 1 , the device 21 3 hav- 
ing the same ciphering mechanism as that of the LSI 1 0 
is connected. If a plurality of LSIs 10 are combined as 

20 shown in Fig. 1 , it is possible to establish cipher com- 
munication among the LSIs on the substrate. 
[0069] In the above-stated embodiment, the circuit in- 
corporated into one LSI is referred to as an internal cir- 
cuit and a group of devices provided externally of the 

25 LSI is referred to as an external circuit. The internal cir- 
cuit is not necessarily mounted on one LSI. It is also 
possible, for example, that if a circuit is dispersed and 
mounted on a plurality of LSIs and the plurality of LSIs 
are packaged in one integrated circuit package or inte- 

30 grally molded, then the entire circuit dispersed and 
mounted on these plural LSIs may be referred to as an 
internal circuit. 



35 Claims 

1 . A processing apparatus comprising: 

an internal circuit (100) including a CPU (101) 

40 executing programs, at least one internal de- 

vice (1 02-1 05) having a predetermined function 
and bus line means (110, 111, 112) connecting 
said CPU (101) to said internal device 
(102-105), extending externally and transfer- 

45 ring an address and data; and 

an external circuit (200) provided externally of 
an externally extending portion (110a) of said 
bus line means (110, 111 , 112) and including at 
least one external device(301 ,302) having a 

50 predetermined function, wherein 

said internal circuit (100) includes a ciphering 
section (120) interposed at an entrance to an 
external side and ciphering the address and the 
data on the bus line means (1 1 0, 1 1 1 , 1 1 2) by 

55 ciphering patterns according to a plurality of re- 

gions divided from an address space allotted to 
the entirety of said at least one external device 
(200); 
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characterised in that said ciphering section 
(120) outputs a dummy address and dummy data 
to the externally extending portion (110a) of said 
bus line means (110, 111, 112) at timing at which 
said external circuit (200) is not accessed. 

2. A processing apparatus according to claim 1, 
wherein the ciphering patterns adopted by said ci- 
phering section include one ciphering pattern in 
which neither the address nor data is ciphered. 

3. A processing apparatus according to claim 1, 
wherein said external circuit (200) includes a plural- 
ity of external devices (201, 202, 203, 211, 212); 
and 

said ciphering section (120) performs cipher- 
ing using ciphering patterns according to said plu- 
rality of external devices (201 , 202, 203, 211 , 212), 
respectively. 

4. A processing apparatus according to claim 1, 
wherein said CPU (1 01 ) is supplied with a clock and 
executes the programs synchronously with the sup- 
plied clock, and said ciphering section (1 20) is sup- 
plied with a clock and performs ciphering synchro- 
nously with the supplied clock; and 

further comprising a clock supply section 
(302) for supplying a clock at a higher speed than 
a speed of the clock supplied to said CPU (101), to 
said ciphering section. 

5. A processing apparatus according to claim 1 , com- 
prising: 



prising: 

ciphering pattern change means for changing 
a ciphering pattern whenever a predetermined 
5 initialisation operation is carried out for one of 

the plurality of regions divided from the address 
space allotted to the entirety of said at least one 
external device. 

10 9. A processing apparatus according to claim 1 , 
wherein said ciphering section adopts a ciphering 
pattern in which ciphered data is changed accord- 
ing to the address, for one of the plurality of regions 
divided from the address space allotted to the en- 

15 tirety of said at least one external device, to thereby 
cipher the data. 

10. An integrated circuit including a processing appa- 
ratus as claimed in any preceding claim. 

20 

Patentanspriiche 

1. Verarbeitungsvorrichtung, welche umfasst: 

25 

eine interne Schaltung (1 00), welche eine CPU 
(101), die Programme ausfuhrt, mindestens ein 
internes Gerat (1 02-1 05), welches eine vorbe- 
stimmte Funktion hat, und Busleitungsmittel 
30 (110, 111, 112) enthalt, welche die CPU (101) 

mit dem internen Gerat (102-105) verbinden, 
sich nach auBen erstrekken und eine Adresse 
und Daten ubertragen, und 



ciphering pattern determination means for rec- 35 
ognizing a constitution of said external circuit 
and determining a ciphering pattern of said ci- 
phering section according to the constitution of 
said external circuit. 

40 

6. A processing apparatus according to claim 1 , 
wherein said ciphering section ciphers the address 
and the data on said bus line means by ciphering 
patterns according to the plurality of regions divided 
from the address space allotted to the entirety of ^5 
said no less than one external device and according 

to application programs executed by said CPU. 

7. A processing apparatus according to claim 1 , com- 
prising: 50 

a deciphering section connected to the exter- 
nally extending portion of said bus line means, 
and returning the ciphered address and the da- 
ta on the bus line means to an address and data 55 
which are not ciphered. 

8. A processing apparatus according to claim 1 , com- 



eine externe Schaltung (200), welche sich au- 
Berhalb eines sich nach auBen erstreckenden 
Teils (110a) der Busleitungsmittel (110, 111, 
112) befindet und mindestens ein externes Ge- 
rat (301 , 302) enthalt, das eine vorbestimmte 
Funktion hat, wobei 

die interne schaltung (100) einen Verschlusse- 
lungsabschnitt (120) aufweist, der an einen 
Eingang zu einer externen Seite zwischenge- 
schaltet ist und die Adresse und die Daten auf 
den Busleitungsmittein (110, 111, 112) ver- 
schlusselt durch Verschltisselung von Mustern 
entsprechend einer Anzahl von Bereichen, die 
abgetrenntsindvon einem Adressenraum, wel- 
cher der aus mindestens einem Gerat beste- 
henden Gesamtheit der externen Gerate (200) 
zugeordnet ist; 

dadurch gekennzeichnet, dass der Ver- 
schlusselungsabschnitt (120) an den sich nach au- 
Ben erstreckenden Teil (1 1 0a) der Busleitungsmittel 
(110, 111, 112) eine Scheinadresse und Scheinda- 
ten ausgibt zu Zeiten, zu denen auf die externe 
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Schaltung (200) nicht zugegriffen wird. 

2. Verarbeitungsvorrichtung gemaB Anspruch 1 , bei 
welcher die vom Verschlusselungsabschnitt iiber- 
nommenen Verschlusselungsmuster ein Ver- 
schliisselungsnnuster enthalten, in weiclienn weder 
die Adresse nocli die Daten versclilusselt sind. 

3. verarbeitungsvorriclitung gemaB Anspruch 1 , bei 
welcher die externe Schaltung (200) eine Anzahl 
von externen Geraten (201 , 202, 203, 211,212) ent- 
halt, und 

der Verschlusselungsabschnitt (1 20) die Ver- 
schlusselung ausfuhrt unter Verwendung von Ver- 
schlusselungsmustern entsprechend der Anzahl 
der jeweiligen externen Gerate (201 , 202, 203, 211 , 
212). 

4. Verarbeitungsvorrichtung gemaB Anspruch 1 , bei 
welcher die CPU (101) einen Talct zugefuhrt be- 
l<onnnnt und die programme synchron mit diesem zu- 
gefuhrten Takt ausfuhrt und der Verschlusselungs- 
abschnitt (1 20) einen Takt zugefuhrt bekommt und 
die Verschliisselung synchron mit diesem zuge- 
fiihrten Takt ausfuhrt, und 

welche ferner einen Taktgeberbereich (302) 
umfasst, damit dem Verschlusselungsabschnitt ein 
Takt mit einer hoheren Geschwindigkeit als der Ge- 
schwindigkeit des der GPU (101) zugefuhrten Tak- 
tes zugefuhrt wird. 

5. Verarbeitungsvorrichtung gemaB Anspruch 1 , wel- 
che umfasst: 

Verschliisselungsmuster-Anderungsmittel, um 
die Struktur der externen Schaltung zu erken- 
nen und ein Verschlusselungsmuster des Ver- 
schlusselungsabschnitts entsprechend der 
Struktur der externen Schaltung zu bestimmen. 

6. Verarbeitungsvorrichtung gemaB Anspruch 1, bei 
welcher der Verschlusselungsabschnitt die Adres- 
se und die Daten auf den Busleitungsmittein ver- 
schlusselt durch verschlusselung von Mustern ent- 
sprechend der Anzahl der Bereiche, die von dem 
Adressenraum abgetrennt sind, welcher der aus 
mindestens einem Gerat bestehenden Gesamtheit 
der Gerate zugeordnet ist, und entsprechend den 
von der CPU ausgefiihrten Anwendungsprogram- 
men. 

7. Verarbeitungsvorrichtung gemaB Anspruch 1 , wel- 
che umfasst: 

einen Entschlusselungsabschnitt, welcher an 
den sich nach auBen erstreckenden Tell der 
Busleitungsmittel angeschlossen ist und die 
verschliisselte Adresse und die Daten auf den 



Busleitungsmittein in eine Adresse und in Da- 
ten, die unverschlusselt sind, rtickfuhrt. 

8. Verarbeitungsvorrichtung gemaB Anspruch 1 , wel- 
5 che umfasst: 

Verschlusselungsmister-Anderungsmittel zum 
Andern eines Verschlusselungsmusters immer 
dann, wenn eine vorbestimmte Initialisierungs- 
10 operation fur einen Bereich aus der Anzahl von 

Bereichen ausgefuhrt wird, die von dem Adres- 
senraum abgetrennt sind, welcher der Gesamt- 
heit aus mindestens einem externen Gerat zu- 
geordnet ist. 

15 

9. Verarbeitungsvorrichtung gemaB Anspruch 1 , bei 
welcher der Verschlusselungsabschnitt ein Ver- 
schlusselungsmuster iibernimmt, in welchem ver- 
schliisselte Daten entsprechend der Adresse gean- 



20 dert werden fur einen Bereich aus der Anzahl von 
Bereichen, die von dem Adressenraum abgetrennt 
sind, welcher der Gesamtheit aus mindestens ei- 
nem externen Gerat zugeordnet ist, um dadurch die 
Daten zu verschlusseln. 

25 

10. Integrierter Schaltkreis, welcher eine Verarbei- 
tungsvorrichtung enthalt, wie sie in irgend einem 
der vorangehenden Anspriiche beansprucht ist. 

30 

Revendications 

1 . Dispositif de traitement comportant : 

35 un circuit interne (100) comprenant une CPU 

(1 01 ) executant des programmes, au moins un 
dispositif interne (102-105) possedant une 
fonction predeterminee et des moyens de ligne 
de bus (1 1 0, 1 1 1 , 1 1 2) reliant ladite CPU (1 01 ) 

40 audit dispositif interne (102-105), s'etendant 

exterieurement et transferant une adresse et 
des donnees ; et 

un circuit externe (200) prevu a I'ext^rieur d'une 
partie s'etendant exterieurement (110a) des- 
45 dits moyens de ligne de bus (110, 111, 1 1 2) et 

comprenant au moins un dispositif externe 
(301 , 302) possedant une fonction predetermi- 
nee, dans lequel 

ledit circuit interne (1 00) comprend une section 
50 de chiffrement (120) interpos6e a une entr6e 

au cote externe et chiffrant I'adresse et les don- 
nees sur les moyens de ligne de bus (110, 111 , 
112) en chiffrant des modeles selon une plura- 
lity de regions s^par^es d'un espace d'adresse 
55 alloue a la totalite dudit au moins un dispositif 

externe (200) ; 

caracterise en ce que ladite section de chif- 
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frement (120) delivre uneadressefictive etdes don- 
nees fictives a la partie s'6tendant exterieurement 
(110a) desdits moyens de ligne de bus (110, 111, 
1 1 2) a un moment auquel ledit circuit exteme (200) 
n'est pas acc666. 

2. Dispositif de traitement selon la revendication 1 , 
dans lequel les modeles de chiffrement adopt6s par 
ladite section de chiffrement comprennent un mo- 
dele de chiffrement dans lequel ni I'adresse ni les 
donnees ne sont chiffrees. 

3. Dispositif de traitement selon la revendication 1 , 
dans lequel ledit circuit externe (200) comprend une 
pluralite de dispositifs externes (201 , 202, 203, 211 , 
212); et 

ladite section de chiffrement (1 20) effectue un 
chiffrement en utilisant des modeles de chiffrement 
selon ladite pluralite de dispositifs externes (201 , 
202, 203, 211, 212), respect ivement. 

4. Dispositif de traitement selon la revendication 1 , 
dans lequel ladite CPU (1 01 ) est equipee d'une hor- 
loge et execute les programmes de fagon synch ro- 
ne avec I'horloge fournie, et ladite section de chif- 
frement (1 20) est equipee d'une horloge et effectue 
un chiffrement de fagon synchrone avec I'horloge 
fournie ; et 

comportant en outre une section d'alimenta- 
tion d'horloge (302) pour alimenter une horloge a 
une Vitesse plus elevee qu'une Vitesse de I'horloge 
d6livree a ladite CPU (1 01 ), a ladite section de chif- 
frement. 



donnees chiffrees sur les moyens de ligne de 
bus a I'adresse et aux donn6es qui ne sont pas 
chiffrees. 

5 8. Dispositif de traitement selon la revendication 1 , 
comportant : 

des moyens de changement de modele de chif- 
frement pour changer un modele de chiffre- 
10 ment chaque fois qu'une operation d'initialisa- 

tion predeterminee est mise en oeuvre pour 
I'une de la plurality de regions s6par6es d'un 
espace d'adresse alloue a la totality dudit au 
moins un dispositif externe. 

15 

9. Dispositif de traitement selon la revendication 1 , 
dans lequel ladite section de chiffrement adopte un 
modele de chiffrement dans lequel les donnees 
chiffrees sont changees selon I'adresse, pour I'une 

20 de la plurality de regions s6par6es d'un espace 
d'adresse allou§ a la totality dudit au moins un dis- 
positif externe, pour ainsi chiffrer les donn6es. 

10. Circuit integre comprenant un dispositif de traite- 
25 ment selon I'une quelconque des revendications 

pr6c6dentes. 



30 



5. Dispositif de traitement selon la revendication 1 , 35 
comportant : 

des moyens de determination de modele de 
chiffrement pour reconnaitre un agencement 
dudit circuit externe et pour determiner un mo- 40 
dele de chiffrement de ladite section de chiffre- 
ment selon I'agencement dudit circuit externe. 

6. Dispositif de traitement selon la revendication 1 , 
dans lequel ladite section de chiffrement chiffre ^5 
I'adresse et les donnees sur lesdits moyens de ligne 

de bus en chiffrant des modeles selon la pluralite 
de regions separees d'un espace d'adresse alloue 
a la totalite dudit pas moins d'un dispositif externe 
et selon les programmes d'application executes par so 
ladite CPU. 



7. Dispositif de traitement selon la revendication 1 , 
comportant : 

une section de d^codage relive a la partie 
s'etendant exterieurement desdits moyens de 
ligne de bus, et en retournant I'adresse et les 
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